syzbot

 sign-in | mailing list | source | docs
🐞 Open [985] ≡ Subsystems 🐞 Fixed [5216] 🐞 Invalid [12474] ⬇ Missing Backports [82] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

INFO: rcu detected stall in pie_timer (4)

Status: auto-closed as invalid on 2021/08/22 00:34
Subsystems: net
[Documentation on labels]
First crash: 1061d, last: 1061d
▶ ▼ Similar bugs (5)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: rcu detected stall in pie_timer (5) net 2 881d 884d 0/26 closed as invalid on 2022/02/08 10:00
upstream INFO: rcu detected stall in pie_timer (2) net 2 1643d 1647d 0/26 auto-closed as invalid on 2020/01/18 03:16
upstream INFO: rcu detected stall in pie_timer net C 19 1648d 1684d 13/26 fixed on 2019/10/15 23:40
upstream INFO: rcu detected stall in pie_timer (3) net 4 1320d 1389d 0/26 auto-closed as invalid on 2020/12/06 09:21
linux-4.19 INFO: rcu detected stall in pie_timer C error 28 587d 1684d 0/1 upstream: reported C repro on 2019/09/09 01:30

Sample crash report:
rcu: INFO: rcu_preempt self-detected stall on CPU
rcu: 	1-....: (10501 ticks this GP) idle=18a/1/0x4000000000000000 softirq=240823/240823 fqs=5175 
	(t=10502 jiffies g=419997 q=8867)
NMI backtrace for cpu 1
CPU: 1 PID: 18805 Comm: syz-executor.3 Not tainted 5.13.0-rc2-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x141/0x1d7 lib/dump_stack.c:120
 nmi_cpu_backtrace.cold+0x44/0xd7 lib/nmi_backtrace.c:105
 nmi_trigger_cpumask_backtrace+0x1b3/0x230 lib/nmi_backtrace.c:62
 trigger_single_cpu_backtrace include/linux/nmi.h:164 [inline]
 rcu_dump_cpu_stacks+0x25e/0x3f0 kernel/rcu/tree_stall.h:341
 print_cpu_stall kernel/rcu/tree_stall.h:624 [inline]
 check_cpu_stall kernel/rcu/tree_stall.h:699 [inline]
 rcu_pending kernel/rcu/tree.c:3911 [inline]
 rcu_sched_clock_irq.cold+0x3f1/0x74b kernel/rcu/tree.c:2649
 update_process_times+0x16d/0x200 kernel/time/timer.c:1796
 tick_sched_handle+0x9b/0x180 kernel/time/tick-sched.c:226
 tick_sched_timer+0x1b0/0x2d0 kernel/time/tick-sched.c:1373
 __run_hrtimer kernel/time/hrtimer.c:1537 [inline]
 __hrtimer_run_queues+0x1c0/0xe40 kernel/time/hrtimer.c:1601
 hrtimer_interrupt+0x330/0xa00 kernel/time/hrtimer.c:1663
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1089 [inline]
 __sysvec_apic_timer_interrupt+0x146/0x540 arch/x86/kernel/apic/apic.c:1106
 sysvec_apic_timer_interrupt+0x40/0xc0 arch/x86/kernel/apic/apic.c:1100
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:647
RIP: 0010:check_kcov_mode kernel/kcov.c:163 [inline]
RIP: 0010:__sanitizer_cov_trace_pc+0x7/0x60 kernel/kcov.c:197
Code: ff ff b9 ff ff ff ff ba 08 00 00 00 4d 8b 03 48 0f bd ca 49 8b 45 00 48 63 c9 e9 64 ff ff ff 0f 1f 40 00 65 8b 05 f9 16 8d 7e <89> c1 48 8b 34 24 81 e1 00 01 00 00 65 48 8b 14 25 00 f0 01 00 a9
RSP: 0018:ffffc90000dc0c90 EFLAGS: 00000202
RAX: 0000000000000101 RBX: ffff8881d3c1d2c0 RCX: ffff8881d3010000
RDX: 0000000000000000 RSI: ffff8881d3010000 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001
R10: ffffffff873ce508 R11: 0000000000000000 R12: fffffff0a3da8872
R13: ffff8881d3c1d300 R14: 0000000000000000 R15: 0000000000000001
 pie_calculate_probability+0x382/0x7c0 net/sched/sch_pie.c:400
 pie_timer+0xca/0x180 net/sched/sch_pie.c:430
 call_timer_fn+0x1a5/0x6b0 kernel/time/timer.c:1431
 expire_timers kernel/time/timer.c:1476 [inline]
 __run_timers.part.0+0x67c/0xa50 kernel/time/timer.c:1745
 __run_timers kernel/time/timer.c:1726 [inline]
 run_timer_softirq+0xb3/0x1d0 kernel/time/timer.c:1758
 __do_softirq+0x29b/0x9f6 kernel/softirq.c:559
 invoke_softirq kernel/softirq.c:433 [inline]
 __irq_exit_rcu+0x136/0x200 kernel/softirq.c:637
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:649
 sysvec_apic_timer_interrupt+0x93/0xc0 arch/x86/kernel/apic/apic.c:1100
 </IRQ>
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:647
RIP: 0010:lock_acquire+0x1ef/0x740 kernel/locking/lockdep.c:5480
Code: 75 a7 7e 83 f8 01 0f 85 ee 03 00 00 9c 58 f6 c4 02 0f 85 d9 03 00 00 48 83 7c 24 08 00 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24
RSP: 0018:ffffc90017d5f050 EFLAGS: 00000206
RAX: dffffc0000000000 RBX: 1ffff92002fabe0c RCX: 00000000852ad9f3
RDX: 1ffff1103a60213e RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff902268a7
R10: fffffbfff2044d14 R11: 0000000000000000 R12: 0000000000000002
R13: ffffffff8bf79320 R14: 0000000000000000 R15: 0000000000000000
 rcu_lock_acquire include/linux/rcupdate.h:267 [inline]
 rcu_read_lock include/linux/rcupdate.h:657 [inline]
 count_memcg_event_mm.part.0+0x38/0x2c0 include/linux/memcontrol.h:1069
 count_memcg_event_mm include/linux/memcontrol.h:613 [inline]
 handle_mm_fault+0xc3/0x7e0 mm/memory.c:4580
 faultin_page mm/gup.c:908 [inline]
 __get_user_pages+0x7cf/0x1490 mm/gup.c:1127
 __get_user_pages_locked mm/gup.c:1313 [inline]
 get_user_pages_unlocked+0x1b3/0x730 mm/gup.c:1976
 __gup_longterm_unlocked mm/gup.c:2548 [inline]
 internal_get_user_pages_fast+0x17c7/0x2420 mm/gup.c:2636
 get_user_pages_fast+0x66/0xa0 mm/gup.c:2728
 iov_iter_get_pages+0x2bd/0x17e0 lib/iov_iter.c:1509
 __bio_iov_iter_get_pages block/bio.c:1013 [inline]
 bio_iov_iter_get_pages block/bio.c:1121 [inline]
 bio_iov_iter_get_pages+0x207/0x1440 block/bio.c:1107
 iomap_dio_bio_actor+0x7e3/0x1090 fs/iomap/direct-io.c:317
 iomap_dio_actor+0x89/0x550 fs/iomap/direct-io.c:419
 iomap_apply+0x2a3/0xb50 fs/iomap/apply.c:84
 __iomap_dio_rw+0x719/0x1330 fs/iomap/direct-io.c:561
 iomap_dio_rw+0x30/0x90 fs/iomap/direct-io.c:649
 ext4_dio_write_iter fs/ext4/file.c:568 [inline]
 ext4_file_write_iter+0xe18/0x14e0 fs/ext4/file.c:678
 call_write_iter include/linux/fs.h:2114 [inline]
 new_sync_write+0x426/0x650 fs/read_write.c:518
 vfs_write+0x796/0xa30 fs/read_write.c:605
 ksys_write+0x12d/0x250 fs/read_write.c:658
 do_syscall_64+0x3a/0xb0 arch/x86/entry/common.c:47
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x4665d9
Code: Unable to access opcode bytes at RIP 0x4665af.
RSP: 002b:00007f3f8fe7e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
RDX: 000000000000f000 RSI: 0000000020000200 RDI: 0000000000000009
RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
R13: 00007ffc60f1e0bf R14: 00007f3f8fe7e300 R15: 0000000000022000

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/05/24 00:30 upstream 6ebb6814a1ef 3c7fef33 .config console log report info ci-upstream-kasan-gce-root INFO: rcu detected stall in pie_timer
* Struck through repros no longer work on HEAD.